Release Notes

v2.0.1 — 2026-02-24

Added

  • Dashboard visibility (Shared/Private) can now be chosen in the dashboard details page.

  • Default values in the Create New Case form: date (today), severity (LOW), TLP (white), PAP (white).

Changed

  • Dashboard report now renders at a larger resolution to include full dashboard content.

Fixed

  • Chart style handles long labels more cleanly.

  • Task editor works properly and allows assigning a task to a user.

  • Task tab shows correct task context.

  • Organization switches now auto-refresh data across Cases, AlertList, MyTasks, WaitingTask, ReportList, and Dashboard pages.

  • Dashboard details no longer flashes previous content when switching dashboards; shows a loading state until new data loads.

  • Stream updates preserve selection state in task, case, alert, and observable lists.

  • storage.conf path updated during upgrade from version 1.3.0 or earlier.

v2.0.0-1 — 2025-12-17

Added

  • Azure Exchange responder for blocking suspicious organization senders.

  • Upgrade path from version 1.2.1 to 2.0.0 via install.sh.

  • backup.sh script for performing backups in single-node environments.

Changed

  • User interface replaced with a new React-based GUI.

  • Indexing and data storage engine migrated from Elasticsearch 7 to the Energy Logserver data-node.

  • Authentication support added on the Energy Logserver data-node for Base and Automation modules.

v1.2.1-3 — 2025-04-28

Fixed

  • Broken Cassandra repository keys.

v1.2.1-2 — 2024-10-22

Fixed

  • Analyzer dependencies.

v1.2.1-1 — 2024-08-23

Added

  • Observable export to STIX format — exports case observables to Structured Threat Information Expression (STIX), enabling compatibility with threat intelligence platforms and building a dependency graph between observables.

  • Expanded permissions system for the Plugins module — administrators can assign specific roles and permissions to plugins.

Fixed

  • Automation EmlParser report creation failure on specific Unicode characters.

  • Installation script failure on newer Oracle Linux 8 versions.

v1.2.0-1 — 2023-09-11

Added

  • Chat for case and organisation-specific discussions.

  • VSCode integration — administrators can manage Responders and Analyzers via the web application.

  • Polish language support (i18n).

  • New workflow nodes: Energy SOAR Base, Energy SOAR Automation, Generate Report, Request Tracker.

  • User information added to responder run history in Energy SOAR Base.

  • New responders in Automation: LDAP ChangePWD, LDAP UnblockUser, LDAP BlockUser, Eset MachineIntegration, Eset MachineIsolation, Eset AddSHA1ToBlacklist.

Changed

  • Embedded applications (Workflows, Chat, VSCode) window height is now dynamically sized.

Fixed

  • Incorrect API key authorization for the RunWorkflow responder in new installations.

  • Missing Java dependencies after Oracle Linux dependency changes.

  • Missing webhook for the Analyze Email workflow risk analysis.

Removed

  • Deprecated alternatives-based Java version selection.

v1.1.4-1 — 2023-06-21

Added

  • New responders in Automation: Fortinet FortiMail, Sentinel One.

  • New analyzer in Automation: Energy Feed.

Changed

  • Installation script improved; several configuration steps automated.

  • Energy SOAR scripts moved to a separate directory.

  • MaxMind GeoIP database now updates automatically in Automation.

  • Performance of the Analyze Email workflow optimized.

  • License system improvements.

  • Energy SOAR Automation updated to 3.1.7.

  • Workflow module environment variables moved to a dedicated env file in the Base configuration directory.

v1.1.3-3 — 2022-12-06

Fixed

  • License system: incorrect concurrent user count.

v1.1.3-2 — 2022-11-23

Fixed

  • Interpreter resolution for responders and analyzers.

v1.1.3-1 — 2022-10-17

Added

  • New responder in Automation: RunWorkflow.

  • New built-in workflows: Correlate Alerts, Unauthorized Login, User Added to Security-Enabled Group.

  • Script to convert analyzers and responders into Docker images.

Changed

  • The Analyze Email workflow now runs analyzers asynchronously.

  • Python 2 removed; Python 3 is the default runtime in Automation.

  • Energy SOAR Base updated to 4.1.23.

  • Hybrid Analytics switched to API v2 in Automation.

  • CIRCLHashlookup added SHA-256 support in Automation.

  • Base now accepts self-signed certificates by default.

Fixed

  • Eml_parser dependencies.

  • Authentication bypass vulnerability.

  • Workflows load page failure when using Active Directory.

  • Workflows autostart.

  • Installation script failure with non-English system locales.

  • Task, observables, and related data now auto-refresh.

  • Elasticsearch now autostarts on system boot.

v1.1.2-1 — 2022-08-03

Added

  • Webhook API.

  • Share webhook URL feature in Automation.

  • Multi-tenancy in Automation.

  • Bulk case edit actions in Base.

Changed

  • n8n configuration moved to a JSON file.

Fixed

  • Fetching all analyzers on an Automation node.

  • All services now autostart on system boot.

v1.1.1-1 — 2022-04-19

Changed

  • Built-in workflows updated.

  • Automation connector now uses the current user identity when pushing analyzers and responders.

  • Admin password removed from Automation connector configuration.

Fixed

  • Missing icons.

v1.1.0-1 — 2022-03-15

Initial public release.